HotExBilling Manager 73 Cross Site Scripting

Title: ==== HotExBilling Manager – Cross-site scripting XSS vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: HelpAG Website: www.helpag.com CVE: ===== CVE-2015-2781 Date: ==== 12-03-2015 dd/mm/yyyy Vendor: ====== Hotspot Express has been in the billing solution business sinc...

Code injection

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php...

CVE-2014-6029

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php...

Stored XSS Vulnerability found on Atlassian

Hi ! My name is Andi Rrahmani and i am an Independent Security Researcher. I am writing this email to let you know of a Stored XSS Vulnerability that i found on atlassian.com . You will have the POC as an atachment to this report that i am making. Now i will show you in details how i managed to...

Stored XSS Vulnerability found on Atlassian

panel:bgColor=e7f4fa NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report|http://jira.atlassian.com/browse/CONFCLOUD-47027. panel Hi ! I am writing this email to let you know of a Stored XSS Vulnerability that i found on atlassian.com . You will...

ThinkSAAS 2.2-beta 存储型XSS

简要描述： 富文本过滤不严格导致可植入恶意脚本盗取用户cookies 详细说明： 对比了一下 WooYun: Thinksaas存储型XSS ，发现确实更新了。我就无耻的来了。 下面是对富文本过滤的代码片段： function cleanJs$text $text = trim $text ; //$text = stripslashes $text ; // 完全过滤注释 $text = pregreplace '//', '', $text ; // å®Œå…¨è¿‡æ»¤åŠ¨æ€ä»£ç  $text = pregreplace '//', '',...

Taobao fraud and a module XSS vulnerabilities can steal user cookies-vulnerability warning-the black bar safety net

First let's look at TaobaoXSSvulnerability ! Taobao decoration can invoke a third-party module, this means that this third party template if there is a vulnerability even being invaded are likely implicated in Taobao shop! Edit the third party Module, added toXSScode, and then the shop calls ! Op...

ForeScout CounterACT reflected XSS vulnerability

Overview The ForeScout CounterACT appliance contains reflected cross-site scripting XSS vulnerabilities. Description The web interface of the ForeScout CounterACT appliance contains reflected XSS vulnerabilities CWE-79. The following are a couple...

Tech-ex v6. 5 CMS Oday-vulnerability warning-the black bar safety net

Background: writing website kesion directory such as http://localhost cookies: after login to grab the USER's COOKIES Account password: after registration you can log in as normal user name and password Code: the login code, grab the figure after the fill The operation,first enter the site,first...

Joomla! Component com_carman - Cross-Site Scripting

Joomla! Component comcarman - Cross-Site Scripting Joomla Component comcarman Cross Site Scripting Vulnerability author :Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comcarman Bug Type : Cross Site Scripting Infection : Ynetici ve User cookieleri alnabilir. Bug Fi...

Joomla Carman Cross Site Scripting

Joomla Component comcarman Cross Site Scripting Vulnerability author :Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comcarman Bug Type : Cross Site Scripting Infection : Yönetici ve User cookie’leri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir...

CORE-2009-0109 - Multiple XSS in Sun Communications Express

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...

libra-cookie.txt

Libra PHP File Manager Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind --- exploit: javascript:document.cookie = "user=1; path=/"; document.cookie = "pass=1; path=/";...

Cisco Building Broadband Service Manager Cross-Site Scripting Vulnerability

Cisco Building Broadband Service Manager BBSM 5.3 SP2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks. The vulnerability exists due to an input validation error in certain web pages associated with the BBSM web...

omerta-xss.txt

original advisory at http://www.davidsopas.com/soapbox/omertaxss.txt XSS flaws in Omerta script www.barafranca.com version tested: 2.7c and 2.8newer version by David Sopas Ferreira Found and reported at : 5-05-2008PT Full disclosure at : 12-05-2008PT...

Code injection

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies...

CVE-2008-1288

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies...

CVE-2008-1288

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies...

CVE-2008-1288

IBM Rational ClearQuest versions 7.0.1.1 and 7.0.0.2 are affected by a vulnerability that could allow local or remote attackers to obtain sensitive information about users by reading user cookies. The connected sources confirm the affected product/version and the impact tied to cookie leakage, bu...

CVE-2008-1288: Exposure of Sensitive Information to an Unauthorized Actor

IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading user cookies...